44eda832398071003acafb15c16b9562153bd7c60e829c56752f778e48a6d1b2

Sharing

Copy URL Twitter E-mail

General

Target

44eda832398071003acafb15c16b9562153bd7c60e829c56752f778e48a6d1b2
Size

104KB
MD5

c96496b51ef2755318fbbd1264825016
SHA1

7eb54fddab9b15b57d6a5378008df6b9e408cb9d
SHA256

44eda832398071003acafb15c16b9562153bd7c60e829c56752f778e48a6d1b2
SHA512

6fa0d7b98329ccb2f0fdf82c4256d3379ca3abf32eee8e945fdc6e6825bbe5c01ccbe07ccb1aa4d33809824467805a5af650fb504c7a807c038a679c7ec43007
SSDEEP

3072:TvgjFm8ot+LfXNdBvSvE1ATpLiyb0ACpuvVM9MWO:TmcFt+Lvt4E8lgpQ98Mz

Score

N/A

Malware Config

Signatures

Files

44eda832398071003acafb15c16b9562153bd7c60e829c56752f778e48a6d1b2
.exe windows x86

4a2cc805ee6c12bf597d1b517b73b90f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefMDIChildProcA
DdeDisconnect
EnumPropsExA
GetMessagePos
wvsprintfW
GetDialogBaseUnits
WaitMessage
CreateIcon
TrackPopupMenu
SetCaretPos

shell32

ExtractIconA
ExtractAssociatedIconA
ShellExecuteExA
ShellAboutW
ExtractAssociatedIconW
Shell_NotifyIconA
ShellExecuteW

wininet

InternetSetFilePointer
InternetSetCookieW
FtpCreateDirectoryA
HttpSendRequestA
InternetCombineUrlA
InternetSetOptionW

gdi32

ColorCorrectPalette
CloseFigure
CreateBrushIndirect
CombineTransform
CheckColorsInGamut
AddFontMemResourceEx
AngleArc

kernel32

CreateFileW
WriteConsoleW
CloseHandle
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
SetStdHandle
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ReadFile
ReadConsoleInputA
SetConsoleMode
FlushFileBuffers
GetFileType
TerminateJobObject
CreateWaitableTimerW
SetFilePointer
GetLongPathNameW
GetCommMask
SetLastError
RemoveDirectoryW
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
GetLastError
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
Sleep
HeapFree
MultiByteToWideChar

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a2cc805ee6c12bf597d1b517b73b90f

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

wininet

gdi32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 53KB - Virtual size: 52KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 53KB - Virtual size: 52KB